Noticed this for a compilation-time warning, so I'm fixing it even for TT mode -this is not put_user, but copy_to_user, so we need a pointer to sp, not spitself (we're trying to write the word pointed to by the "sp" var.).